CVE-2010-2075

CVE-2010-2075 — UnrealIRCd 3.2.8.1 Backdoor Exploit Overview UnrealIRCd is an open-source IRC Internet Relay Chat server — a protocol that allows users to communicate in real-time over a network, similar to early chat platforms. In 2009–2010, it was discovered that UnrealIRCd 3.2.8.1 distributed...

vmp2

Introduction This repository is a collection of legacy tools for working with VMProtect 2 -protected binaries. These tools enable unpacking, analysis, and experimental devirtualization of software protected with VMProtect 2. At the core of this collection is vmprofiler , a utility library that...

cve-2026-87902

cve-2026-87902 CVE-2026-87902 – WordPress Core LFI to RCE Exploit Auto-Forcing Edition maked by alfaris ⚠️ LEGAL WARNING Using it against systems you do not own or have written permission to test is illegal and punishable under cyber crime laws. The author assumes no responsibility for misuse. 📌...

bluekeep-metasploit-lab-project

Exploiting BlueKeep CVE-2019-0708 on Windows 7 Objective Gain remote access to an unpatched Windows 7 system via the BlueKeep RDP vulnerability using Metasploit. Lab Setup Attacker: Kali Linux Target: Windows 7 Unpatched, RDP Enabled Network: NAT / Host-Only Tools Used Metasploit Framework Kali...

CVE-2026-1961-foreman-poc

Foreman WebSocket Proxy Command Injection CVE-2026-1961 — PoC Proof-of-concept for a command injection vulnerability in Foreman's WebSocket proxy lib/wsproxy.rb, disclosed responsibly to Red Hat and patched. Summary Foreman's WebSocket proxy interpolates an unsanitized host value, sourced from a...

CVE-2026-4813

CVE-2026-4813 CVSS-B 9.4 CRITICAL Authenticated RCE via XSLT injection in Lutece Core Explanations and more on my website /xsl:styleshee...

evmbench-certora-agent-harness

EVMBench Certora Agent Harness Configurable agent harness for iterative smart-contract spec generation/refinement using: EVMBench-style tasks openai/frontier-evals - project/evmbench Certora Prover Certora/CertoraProver LLM backend: OpenAI API, OpenRouter API, local Ollama, or mock mode What this...

unhook-bof

This is a Beacon Object File to refresh DLLs and remove their hooks. The code is from Cylance's Universal Unhooking research: https://blogs.blackberry.com/en/2017/02/universal-unhooking-blinding-security-software To use: Load unhook.cna into Cobalt Strike via Cobalt Strike - Script Manager Run...

CVE-2025-55182-React2Shell

React2Shell React2Shell is a proof-of-concept PoC exploit demonstrating a CRITICAL remote code execution RCE vulnerability in modern web frameworks using React Server Components RSC. This PoC targets CVE-2025-55182 , a CVSS 10.0 vulnerability that allows unauthenticated remote attackers to execut...

CVE-2025-2304-exploit

CVE-2025-2304 - Camaleon CMS Mass Assignment Privilege Escalation 📌 Project Description CVE-2025-2304 is a Mass Assignment vulnerability in Camaleon CMS versions 2.9.1 that allows an authenticated user to elevate their privileges to administrator by manipulating the role parameter in password...

EphemeralNet

EphemeralNet A secure P2P network with custom Relay for hostile NATs, built in C++20. Programmable forgetting for high-assurance peer-to-peer storage. Why EphemeralNet? Shardian designs infrastructure for teams that take deletion guarantees as seriously as confidentiality. EphemeralNet is our C++...

SmartScanner-Source

SmartScanner A web vulnerability scanner built with C++17 and Qt 6, featuring graphical and command-line interfaces. This repository contains a reconstruction of SmartScanner 3.0.0 for educational purposes. It combines a web crawling engine, vulnerability detection modules, and JSON reporting...

CVE-2026-26980

CVE-2026-26980 ★ CVE-2026-26980 TryGhost Ghost CMS Content API SQL Injection PoC ★ https://github.com/user-attachments/assets/e7fab29e-8382-4ecc-986c-68852c28a32c Overview CVE-2026-26980 is an unauthenticated SQL Injection vulnerability in TryGhost Ghost CMS Content API. The vulnerable path is...

CVE-2026-73570

🔴 CVE-2026-73570 — high-severity unauthenticated RCE ⚠️ Unauthenticated OS Command Injection → Remote Code Execution Zimbra Collaboration Suite · SNMP Notification Processing 🧠 Overview CVE-2026-73570 is a high-severity OS command injection vulnerability affecting specific configurations of Zimbra...

CVE-2026-25253

CVE-2026-25253 OpenClaw 1-Click RCE ★ CVE-2026-25253 OpenClaw 1-Click Remote Code Execution PoC ★ https://github.com/user-attachments/assets/e6957c61-7549-4e68-831e-a05436504a3e Description CVE-2026-25253 : OpenClaw Authentication Token Exfiltration Vulnerability description: OpenClaw aka clawdbo...

CVE-2026-32127_SqlInjectionVulnerabilityOpenEMR8.0.0

CVE-2026-32127 - SQL Injection Vulnerability in OpenEMR 8.0.0 Weakness CWE-89 Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not...

android_demystification_toolbox

Android Demystification Toolbox Purpose ADT is a Miasm-based symbolic execution toolset designed to help model application behavior, research and test security vulnerabilities, and facilitate reversing hostile code. Features The ability to save/restore all threads & processes contexts A centraliz...

Kali-Metasploitable

Audit Report and Security Laboratory Project: Vulnerability Analysis and Secure Network Exploitation Date: April 2026 Author: Ivo Albacete 1. Executive Summary This project involved the deployment of a controlled environment for practicing cybersecurity techniques. A virtualized laboratory was...

CVE-2025-55182

CVE-2025-55182 — React2Shell: Advanced Exploit & Master's Thesis Research -brightred Deserialization of Untrusted Data + Prototype Pollution in React Server Components Unauthenticated Remote Code Execution via Next.js Server Actions Affected: React 19.0.0 - 19.2.0 · Patch: React 19.0.1 / 19.1.2 /...

Http-Asynchronous-Reverse-Shell

HTTP/S Asynchronous Reverse Shell ✨ Introduction In an age where advanced detection systems such as IDS, IPS, EDR, AV, and firewalls dominate corporate networks, evading them during offensive security assessments is a challenge. Most reverse shells leverage TCP tunnels L4, which are now routinely...